38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/09/2026, 22:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e.exe
Size 101KB
Sample260901-2vmjwscl7s
SHA256 38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e
MD5 9e5a6b7ca9c5f5634e6061a28f8cffba
SHA1 b96ffa3359747f80b68e293b8689822700891bc1
SHA512 a9fee6660a0cd3ae89f0ddcb88bd083c12ce5b3c26ea9d16d7c4ed4c2b3f66cd309b4437b5917f09dc4af2eefe2a035915ef3566164e772961c2912812da49e7
SSDEEP 3072:JvlN5K9njb3qQij/pLvgJHSRNloT2CEF3ddN3h+EYkMAIr4elDvnI0ZDVVkEyXX:JtN5KRbU5KSRNloT2CEF3ddN3h+EYkM
TLSH
T1CEA39202FFEF461AF9B326781DB78485463AF94FAA31810F4364546D19B171086FAB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e.exe

C:\Users\Admin\AppData\Local\Temp\38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e.exe
"C:\Users\Admin\AppData\Local\Temp\38cf994bd21500ac54d445a91ab752498528be782984e5ccab29fd34ac59142e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3756-0-0x0000000000400000-0x0000000000420000-memory.dmp

Download